When a customer signs up on my site, it receives a confirmation of registration which it is written the username and password. Is it regular to have the password in plain text in email?

  • I have just updated my answer since things have changed as of Magento
    – MatthijsIJ
    Commented Dec 10, 2014 at 12:46

1 Answer 1


UPDATE: I just noticed that as of Magento CE the password is no longer included in the Welcome Email. The default email template still contains <strong>Password</strong>: {{htmlescape var=$customer.password}}, but as part of several security enhancements customer passwords are no longer stored in plain text in the database. Therefore the email will display a blank space where the password used to be. So my answer below is only applicable to Magento CE and older.

Yes, this is was standard procedure. In app/locale/YOURLANGUAGE/template/email/account_new.htmlaround line 25 you will find:

<strong>Password</strong>: {{htmlescape var=$customer.password}}

Option 1: You can change this by changing this email template and either remove this line or replace it with something like:

The password you have chosen when creating this account.

Option 2: You could also create a new email template in the Admin Panel via System > Email Templates and then set this new template in System > Configuration > Customers > Customer Configuration > Create New Account Options > Welcome Email

  • thank you.i have choosen the option2.but why Magento does not change the standard procedure. For security, this practice is very dangerous!!
    – strauss
    Commented Dec 9, 2014 at 10:40
  • I totally agree with you and think Magento should change this!
    – MatthijsIJ
    Commented Dec 9, 2014 at 10:43
  • It seems fix to, no ? magento.stackexchange.com/a/145996/24845
    – Nolwennig
    Commented Nov 16, 2016 at 8:59
  • It seems to have returned in the latest security update.. my customer wants it removed. Thanks for posting the solution more than 2 years ago
    – Irfan Khan
    Commented Feb 21, 2017 at 6:42

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.